CVE-2017-7701

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5

Description The BGP dissector in Wireshark could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by using a different integer data type in the packet-bgp.c file.

Recommendations For Wireshark versions 2.0.0 through 2.0.11, update the packet-bgp.c file to use a different integer data type to prevent the infinite loop. For Wireshark versions 2.2.0 through 2.2.5, update the packet-bgp.c file to use a different integer data type to prevent the infinite loop.